Strategy, Governance and Training
Red Team and Blue Team Technical Training
We provide hands-on training for your security team on attack techniques and their detection. The training is conducted in an authorized lab environment.
What it is
This training covers attack and defense together using the same techniques. Participants observe how each technique works and then analyze its traces in logs. Topics are mapped to MITRE ATT&CK, giving both offensive and defensive teams a shared technical reference.
Scope
- Curriculum tailored to the team's role
- Lab practice of Active Directory, cloud, and endpoint techniques
- Detection of the same techniques in logs, EDR, and network data
- Detection rule writing and threat hunting exercises
- Joint scenarios in Purple Team format
- Hands-on assessment at the end of training
The need
When organizations need it
- When a newly formed SOC or internal Red Team needs hands-on competency.
- When your team cannot identify techniques from test and incident reports in its own logs.
- When a new SIEM or EDR is deployed and the team needs hands-on skills to write rules.
Method
How we work
-
Skills assessment
We assess the team's current skills and job descriptions.
-
Curriculum
We select topics based on your environment and techniques observed in your sector.
-
Lab
Each technique is practiced hands-on, first from the attack perspective, then from the detection perspective.
-
Assessment
Training concludes with a hands-on scenario and a report on development areas.
Outcome
What you have at the end
Your team both practices and detects techniques relevant to your sector. Detection rules and exercise scenarios developed remain with your team.
Frequently asked questions
Where are attack techniques practiced?
Only in an authorized lab environment built for this purpose, separate from your production systems.
What if the team has different skill levels?
The curriculum is adjusted to the team's level after a preliminary assessment. Separate groups are formed for different levels if needed.
Strategy, Governance and Training
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting